Vulnerabilities / W3 Total Cache
W3 Total Cache vulnerabilities
Advisories WPSec published for W3 Total Cache. Other sources may list more. Its attack surface: W3 Total Cache on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-21 | WPSEC-2026-1411 | W3 Total Cache <= 2.10.7 - Unauthenticated Minify Cache Poisoning via 'b' Parameter and Query String | Medium 5.3 | 2.11.0 |
| 2026-10-21 | WPSEC-2026-1410 | W3 Total Cache <= 2.10.7 - Unauthenticated Stored Cross-Site Scripting via Cached REST API Responses | Medium 4.7 | 2.11.0 |
| 2026-10-21 | WPSEC-2026-1409 | W3 Total Cache <= 2.10.7 - Unauthenticated Content Injection via Predictable HTML Minify Placeholders | Low 3.7 | 2.11.0 |
License: CC BY 4.0